1. What cookies are
"Cookies" are small files a site stores in your browser. This policy also covers similar technologies such as localStorage and sessionStorage. We group them as strictly necessary (required for the site to function or for security) and optional (analytics or marketing, which need your consent).
2. What we use today
We set strictly necessary items at all times, and Google Analytics and Microsoft Clarity (analytics) and the Microsoft Advertising UET tag (marketing) — the latter in a cookie-free consent mode until you consent. There are no social-media trackers and no other third-party marketing cookies. Google Analytics is configured with advertising features and Google Signals turned off, so it is used for aggregate measurement only — not ad targeting; Microsoft Clarity masks text input by default and is used for aggregate heatmap/session-replay analysis only.
3. The full list
| Name | Type | Purpose | Duration |
|---|---|---|---|
99w_consent | localStorage · necessary | Remembers your cookie choices so we don't ask every visit | Until you clear it |
99w_portal_token | localStorage · necessary | Keeps you signed in to the client portal | Until you sign out |
admin_token | localStorage · necessary | Keeps an administrator signed in (staff only) | Until sign-out |
| Rate-limit & security counters | Server-side · necessary | Protects forms and login from abuse; keyed to your IP, not a cookie in your browser | Minutes |
| Cloudflare Web Analytics | No cookie · necessary | Cloudflare's cookie-free beacon counts page views and performance (no cookies, no cross-site tracking, no personal profiles). It runs without a consent prompt because it stores nothing on your device | None stored |
| Cloudflare infrastructure | Necessary | Our host may set a short-lived security/performance cookie to route and protect traffic | Session – up to 30 min |
_ga | Cookie · analytics (optional) | Google Analytics — distinguishes one visitor's browser from another for aggregate stats | Up to 2 years |
_ga_QFQDSSJFGV | Cookie · analytics (optional) | Google Analytics — keeps session state for the property | Up to 2 years |
_clck | Cookie · analytics (optional) | Microsoft Clarity — links a browser's visits together for aggregate heatmap/session-replay stats | Up to 1 year |
_clsk | Cookie · analytics (optional) | Microsoft Clarity — connects page views into a single session recording | Up to 1 day |
_uetsid | Cookie · marketing (optional) | Microsoft Advertising UET — identifies a visit so we can tell whether a Microsoft ad led to a conversion | Up to 1 day |
_uetvid | Cookie · marketing (optional) | Microsoft Advertising UET — recognizes a returning browser for ad-conversion measurement | Up to 13 months |
4. Optional cookies — Google Analytics, Microsoft Clarity & Microsoft Advertising
We use Google Analytics 4 (measurement ID G-E2ME44F4QS) to understand which pages people visit and how they found us, so we can improve the site. It is off by default: the _ga cookies and the Google script load only after you choose "Accept" (or turn on Analytics in the preferences dialog). Choosing "Reject optional," or sending a Global Privacy Control signal, keeps it off.
We have turned off Google Analytics' advertising features, Google Signals, and ad-personalization, so the data is used for aggregate measurement only. Your IP address is anonymized. Google processes this data on our behalf under the Google Ads Data Processing Terms; see also how Google uses information from sites that use its services. You can also install Google's opt-out browser add-on.
We also use Microsoft Clarity to see aggregate heatmaps and session replays of how people use the site, so we can find and fix confusing pages. It is also off by default: the _clck/_clsk cookies and the Clarity script load only after you accept, and "Reject optional" or a Global Privacy Control signal keeps it off. Clarity masks all text input fields by default, so nothing you type is captured. See Microsoft Clarity's own FAQ for how it handles data.
We also run Microsoft Advertising ads and use its Universal Event Tracking (UET) tag to measure how many visitors who clicked a Microsoft ad went on to start an order. It runs in Microsoft's Consent Mode: the UET script loads on every page, but until you choose "Accept all" (or turn on Marketing in the preferences dialog) it is set to ad storage denied — it sets no _uetsid/_uetvid cookies and stores no identifiers, and conversions are not tied to you. Because the script loads, your browser still makes a request to Microsoft that necessarily includes your IP address, the page address and your browser type. "Reject optional" or a Global Privacy Control signal keeps ad storage denied. Microsoft acts as a provider for this measurement; see the Microsoft Privacy Statement and its ad settings to opt out.
5. Global Privacy Control
If your browser sends a Global Privacy Control (GPC) signal, we treat it as a choice to keep all optional cookies off. You can still turn them on later from "Cookie preferences" in the footer.
6. How to control cookies
- Use the "Cookie preferences" link in the site footer to review or change optional-cookie choices at any time.
- Your browser settings let you block or delete cookies and clear site storage. Blocking strictly necessary items may break the portal or sign-in.
- Guides: Chrome, Safari, Firefox, Edge.
7. Cookies on client sites
Websites we build for small businesses are kept simple and generally do not set cookies. If a client's site embeds a third-party element that does — most commonly a Google Map — that is disclosed on the site's own privacy page, and the map is loaded only when a visitor views it.
8. Changes
We'll update this page if our cookie use changes and post a new effective date.
9. Contact
3TS Group LLC (dba 99websites.co), 1008 West Ave M-14, Suite D832, Palmdale, CA 93551